Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Latest Cybersecurity News

France summoned the Iranian ambassador and said it would seek European sanctions against those responsible for the attack

The high-severity use-after-free in Chrome’s XML component was reported anonymously on November 6 and is already exploited in attacks.

Online fashion retailer Revolve has told regulators that the September cyberattack affected more than 1.5 million individuals.

Threat actors are exploiting the four-flaw chain to hack the Plex Media Server application on QNAP NAS devices.

Hackers compromised an external cloud service used by the shopping platform and may have stolen personal information from it.

Italian Foreign Minister Antonio Tajani said Saturday that his personal data had been disseminated on the dark web.

The initial exploitation attempts are attributed to botnets and crypto miners, but other threat actors are expected to follow suit.

Hackers stole personal, health, and insurance information, including Social Security numbers, from the company’s internal systems.

Frontline Education told Indiana regulators that its August data breach affected over 3 million school district staff and students.

Working with cryptographers, DeepMind’s AI agents cut the cost of forging RSA-1024 signatures and found a cheaper way to factor keys.

Its multi-agent AI platform generates the telemetry an attack would produce to fix gaps in enterprise defenses.

CVE-2026-19868 can let attackers holding credentials for a different login method get past SAML checks, including SAML-enforced MFA.

The emergency package comes after dozens of companies and government agencies were hit by unauthorized access to their systems and leaks of client data, prompting uneasiness across Japan.

Chrome security Chrome security

The high-severity use-after-free in Chrome’s XML component was reported anonymously on November 6 and is already exploited in attacks.

SSH vulnerability SSH vulnerability

The initial exploitation attempts are attributed to botnets and crypto miners, but other threat actors are expected to follow suit.

Encryption attack Encryption attack

Working with cryptographers, DeepMind’s AI agents cut the cost of forging RSA-1024 signatures and found a cheaper way to factor keys.

Top Cybersecurity Headlines

CVE-2026-19868 can let attackers holding credentials for a different login method get past SAML checks, including SAML-enforced MFA.

Rated Critical for cybersecurity, OpenAI’s new model beats GPT-5.6 Cyber at exploitation while staying in scope more reliably.

In a month, 28 residential proxy services used 6 addresses, mainly between 5 p.m. and midnight, Eastern Time.

SecurityWeek Industry Experts

More Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.

Register

Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.

Register

Upcoming Cybersecurity Events

CISO Forum Virtual Summit

The 2026 Virtual CISO Forum brings together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
[November 10 & 11, 2026 | Virtual]

Read More
CISO Forum 2026 Year-End Review Virtual Roundtable

SecurityWeek’s CISO Forum 2026 Year-End Virtual Roundtable will reflect on a landmark year in security and discuss how to fortify your enterprise strategy for 2027.
[December 2, 2026 | Virtual]

Read More
Cyber AI and Automation Summit 2026

SecurityWeek’s Cyber AI & Automation Summit pushes the boundaries of security discussions by exploring the implications and applications of predictive AI, machine learning, and automation in modern cybersecurity programs.
[December 8 & 9, 2026 | Virtual]

Read More
Zero Trust Summit Now On-Demand

SecurityWeek’s 2026 Zero Trust Summit will deep-dive into the world of digital identity management and the role of zero-trust principles and associated technologies
[Originally October 14, 2026]

Read More

Vulnerabilities

Cybercrime

A newly observed Linux Trojan is capable of self-spreading through infected websites and can recruit the infected machines into a peer-to-peer (P2P) botnet, Doctor Web researchers warn.

Today, even mid-sized organizations are dealing with thousands of vulnerabilities across their growing attack surface. Therefore, relying solely on existing intelligence provided by vulnerability scanners should only be a first step in a cyber risk management process. Without determining the risk associated with vulnerabilities, organizations often misalign remediation efforts and resources.

Gozi, one of the oldest banking Trojans out there, is using highly elaborated webinjects along with behavioral biometrics for fraud protection bypass in new campaigns targeting global brands, buguroo researchers warn.

Previously unpublished documents released by former National Security Agency contractor Edward Snowden confirm that some of the spy agency's top-secret code has been leaked or hacked, The Intercept reported Friday.

With Brazil currently hosting the 2016 Olympics, cybercriminals appear determined to profit from this major sporting event as much as possible, such as using banking Trojans that abuse PowerShell, Kaspersky Lab researchers reveal.

Dridex, one of the most prolific Trojans in recent years, is ramping up its activity once again, after coming to a near stop about two months ago, Proofpoint security researchers reveal.

Microsoft has been getting bad press over concerns with Windows 10. There are two primary reasons: firstly that the company is, or has been, overly aggressive in pushing the operating system on existing Windows users; and secondly that it plays fast and loose with user privacy.

The point of sale (PoS) systems at Eddie Bauer retail stores across North America were infected with malware between January 2, 2016 and July 17, 2016, the clothing store chain announced on Thursday.

The Locky ransomware has switched back to the distribution method it used when it first emerged in the wild, namely Office documents with malicious macros, FireEye researchers warn.

The Olympics are such an inspirational time of year. Extraordinary athletes from around the world gather to attempt a lifelong goal of achieving Olympic gold, often the culmination of years or decades of tireless training and dedication. And, we at home get to sit back and watch the best competitors in the world perform amazing acts of athleticism. It’s an exciting time and one I always look forward to. 

Event image poster

The leading global conference series for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.

Learn More

Application Security

Application Security

Sysdig’s platform uses runtime visibility to track AI agent actions and block risky behavior before it reaches production systems.

Cloud Security

Cloud Security

The top payout is for high-impact architectural research demonstrating full administrative control.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.